@rootio/tmp vulnerabilities (Root)
3 vulnerabilities.
-
@rootio/tmpRoot tmp: Type-confusion bypass of _assertPath in [email protected] allows path traversal via non-string prefix/postfix/template 8.2 High -
@rootio/tmpRoot tmp: Path Traversal via unsanitized prefix/postfix enables directory escape 7.7 High -
@rootio/tmpRoot tmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameter 2.5 Low